MBRCGI Websites
|
Ibtekr.org
|
MBRCGI.gov.ae
|
UAE Innovates
|
Edge of Government
|
Pitch@Gov

Using behavioural science to enhance cyber security in New Zealand

9 minute read
In response to national concerns about cyber security, the New Zealand government launched a campaign to lead people's behavioural change and enable them to protect themselves online, based on scientific research that analysed citizens' actions and motivations and suggested ways to change them.
Share this content

Add to Favorite ♡ 0

In response to national concerns about cyber security, the New Zealand government launched a campaign to lead people's behavioural change and enable them to protect themselves online, based on scientific research that analysed citizens' actions and motivations and suggested ways to change them.

Although technology has brought benefits, it has also brought many risks. As any other invention, it has found those who misuse and harness it for illegal or immoral purposes, and it has become necessary for any country that aspires to take advantage of it to be ready to meet its own risks.

Statistics indicate that more than 80% of cyber security breaches in the last year were due to a human element, including unintentional errors and organised campaigns that may be carried out by cyber criminals, hostile nation states and other malicious actors have access to sophisticated technology. Such hackers use machine learning techniques, artificial intelligence, voice messages, deep fakes, ransomware and many more.

These attacks in New Zealand raise serious concerns, as they can cripple vital processes, affect people's lives, destroy institutions and companies and threaten the future of governments. The worst is that the likelihood of these attacks is increasing steadily due to the reality imposed by the COVID-19 pandemic, as the individual spends most of the day online and communicates with the outside world through dozens of accounts on various websites and platforms.

Numerically, New Zealanders lost nearly US $6 million during the third quarter of 2022, and New Zealand’s National Cyber Security Center (NCSC) has announced that an IT managed service provider suffered a cyber-attack, compromising access to its data and systems. Those affected by the cyber security incident included vital government institutions like hospitals, where the attack compromised patient data and interrupted monitoring for cancer patients.

The New Zealand government has adopted a comprehensive cyber security strategy focusing on 4 aspects, namely capacity-building in this area, establishing an active and flexible system, adopting a proactive approach to cybercrime and spreading a culture of cyber security among citizens.

Cyber security requires an antivirus software and hardware, but what’s important is human behaviour. The New Zealand government focused on citizens and made it its goal to equip them with the skills necessary to avoid cyberattacks.

Work began with an extensive research and study campaign conducted by the New Zealand government’s computer emergency response team to design solutions based on its outputs. The research showed that the largest percentage of cybercrime occurs as a result of hacking accounts with weak passwords. Accordingly, the focus was on the science of human behaviours, which are extremely complex and affected by social, environmental, economic, intellectual and neurological factors, and the list goes on.

Scientists attribute many of our behaviours to "cognitive biases," which can be described as systematic errors in thinking that occur when we perceive what is going on around us and interpret it according to past experiences or judgments. Cognitive biases are our brain’s mental short cuts as they guide our decision making and influence our behaviour without us even being consciously aware they are doing so.

Based on this, the team designed a cyber security campaign that takes advantage of cognitive biases, which might help people and attempts to modify those that hinder it. This is what the researchers call “Make it human”, a concept that means using behavioural ‘nudges’ to encourage better cyber practices.

The #BigPasswordEnergy campaign was launched in 2022 with a message that the protection of cyber security is not limited to specialists, but rather affects everyone who uses technological products. The campaign used photos of everyday folks rather than men in suits using advanced computers. This can subconsciously motivate people to act and encourage those with low cyber confidence to take active steps. The campaign also sought to reframe passwords to passphrases. The perception of ease around passphrases was much higher, and people are more likely to act when concepts are framed in simpler ways. Hence, trendy ads around the streets of New Zealand and on the Internet have nudged New Zealanders to adopt stronger passwords that couldn’t be hacked.

New Zealand’s Computer Emergency Report Team (CERT NZ) and The Research Agency have produced Cyber Change – a book of behaviour change techniques aimed at prompting positive cyber security actions. The guide was created for New Zealanders, and government and industry agencies who are working in the area of online security. Its purpose is to share insights about how to improve the effectiveness of cyber security interventions.

It is worth noting that the New Zealand government drew a lot from the Estonian government’s cyber education modelstarting with children in the kindergarten, through adolescents, youth, and adults, and not ending with the elderly.

Behavioural science plays a pivotal role in understanding social phenomena and designing more effective solutions. In New Zealand's experience, awareness campaigns can motivate people to act and build their confidence and knowledge to be the key actors in protecting themselves and their government.

References:

https://dpmc.govt.nz/sites/default/files/2019-07/Cyber%20Security%20Strategy.pdf
https://govinsider.asia/intl-en/article/BIG-PASSWORD-ENERGY-New-Zealand-uses-behavioural-insights-to-drive-cyber-hygiene
https://www.cert.govt.nz/assets/resources/cert-nz-cyber-change-behavioural-insights-2022-online-version.pdf
https://www.weforum.org/agenda/2022/11/how-user-experience-and-behavioural-science-can-guide-smart-cybersecurity/
https://www.dataguidance.com/news/new-zealand-cert-nz-issues-cyber-change-guide
https://www.cshub.com/attacks/news/new-zealand-government-compromised-in-third-party-cyber-attack
https://www.ncsc.govt.nz/news/response-to-managed-service-provider-cyber-security-incident/
https://www.nzherald.co.nz/business/a-mole-map-interrupted-as-cyberattack-barrage-continues/AJUZVU3D3RBSFKBPQJ4KWZXDZQ/
https://www.cert.govt.nz/individuals/news-and-events/scammers-using-sophisticated-attacks-against-new-zealanders/

Subscribe to Ibtekr to stay updated on the latest government initiatives, courses, tools and innovations
Register Now
Subscribe to Ibtekr’s Newsletter
Innovators’ Mailing List
Our newsletter reaches more than 30,000 innovators from around the world! Stay up to date with innovations from across fields of practice in the public sector.
Subscription Form (en)
More from Ibtekr

Biosensors - Using Biology to Sense Biology

In the pursuit of precision and deeper understanding, biosensors have emerged as advanced analytical tools that integrate biological sensing elements with energy transducers to detect and measure various substances. These biosensors hold the potential to revolutionize industries such as healthcare, environmental monitoring, and food safety, offering real-time, accurate detection capabilities.

 · · 18 June 2025

SuperBrain: Empowering the Blind to See Through Technology

In a groundbreaking leap in assistive technology, Estonia-based 7Sense has developed the "Superbrain" device. This innovative tool enables the visually impaired to "see" through the sense of touch, utilizing advanced technologies that create a mental image of reality. This device sets a new standard in the field.

 · · 18 June 2025

Rourkela's Cold Storage: Empowering Women and Reducing Food Watse

Effective and innovative solutions that improve lives and empower marginalized communities are often marked by simplicity. These solutions require unwavering commitment, mutual trust, and strong collaboration to address challenges, adapt to setbacks, and ensure successful implementation. A notable example is the Rourkela Municipal Corporation's project in northern India, which supports small-scale women farmers by enabling them to preserve their produce, reducing post-harvest losses that would otherwise harm their livelihoods and families.

 · · 18 June 2025

Nature-Inspired Solutions: Slime Mold to Map Pathways for Electric Vehicle Charging Stations

It's fascinating to see how researchers are uncovering solutions to the world's biggest challenges through the study of miniscule organisms. Such is the case with a group of researchers who, in their quest to develop infrastructure for electric vehicles, drew inspiration from “Slime Mold” to create a versatile charging network that is both time-efficient and […]

 · · 23 May 2025

Hamburg's Homegrown AI Revamps Government Services

As governments worldwide race to harness the power of artificial intelligence (AI) to enhance decision-making, improve service efficiency, and explore new frontiers in governance, Hamburg has taken a pioneering step. The German city initiated a pilot project to test a home-grown large language model (LLM), or generative AI. This initiative aims not only to optimize […]

 · · 23 May 2025
1 2 3 88
magnifiercrossmenuchevron-down